§ 1.
DEFINITONS

The Administrator of the Personal Data (also interchangeably as: „Administrator”) is X-ONE Sp. z o.o. with its registered office in Wysogotowo (Poznań), address: 8T Serdeczna Street, 62-081 Wysogotowo (Poznań), entered in the Register of Entrepreneurs of the National Court Register under number: KRS 0000722704, having REGON number 369030127 and NIP number PL7811961961, email address: dpaul@x-one.pl, processing personal data of users of the website operating at https://x-one.pl (hereinafter: „Website”).

Personal Data (also interchangeably as: „Data”) – is any information relating to an identified or identifiable natural person, whereby an identifiable natural person shall mean a natural person who can be identified directly or indirectly, in particular on the basis of an identifier such as name, identification number, location data, Internet identifier, e-mail address.

§ 2.
DATA PROCESSING RULES

The Administrator shall process Personal Data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (hereinafter: the „GDPR Regulation”), as well as other relevant provisions of applicable law, including in particular national data protection regulations. The Administrator, for effective protection of the Data, shall apply security measures for the processing of the Data appropriate to the risks and categories of the Data, meeting the requirements set forth in applicable laws.

Data processing purposes

Users’ data will be processed for the following purposes:

Responding by the Administrator to inquiries, calls or requests from Users (Article 6(1)(b) of the GDPR Regulation – to the extent of Data necessary to provide services/perform the contract),
Fulfillment of the Administrator’s legitimate purposes in the form of marketing the Administrator’s products and services and asserting copyright protection and other claims (Article 6(1)(f) of the GDPR Regulation – the Administrator’s legitimate interest).

Contact person

The Administrator – in the absence of a legal obligation – has not appointed a Data Protection Officer. Users may contact the Administrator (data provided above) in matters related to Data processing and the exercise of their rights related to Data processing.

Data processing period

The Administrator will only process the Data for a period no longer than necessary for the purposes for which the Data are processed, i.e.:

Until responses to requests, calls or questions from Users,
For a period of 10 years or until you file an objection – for direct marketing purposes,
Until the statute of limitations on claims,

unless it is necessary in connection with the assertion of claims or when applicable law requires further processing of the Data.

Data recipients

Personal data may be made available by the Administrator to entities authorized to obtain information on the basis of applicable laws, as well as on the basis of a written agreement for entrustment of data processing or on the basis of a written authorization to entities to which access is necessary due to the realization of the purpose for which the personal data was provided, that is, primarily to entities providing the following services to the Administrator: postal, shipping, transportation, accounting, human resources and payroll, legal, banking, data storage services and IT services.

During the use of the Website, information partially sent automatically by the web browsers used by Users may also come into the possession of other entities, which are providers of services whose plug-ins are placed on the Website, including: youtube.com, instagram.cbrom, facebook.com, pinterest.com (the Administrator may have profiles on them). This information may include Data such as the IP address of the device, its type, unique identifier, name of the operating system, browser settings, date and time of queries sent, and present the User’s activities on the websites. Which specific information is acquired depends on the type of device and software settings the User uses. Each provider determines the principles and purposes of the information obtained on its own websites. The devices Users use may also store cookies of other entities, which are providers of services whose plug-ins are placed on the Website, including: youtube.com, instagram.com, facebook.com, pinterest.com. (Administrator may have profiles on them).

Personal data will not be transferred to a third country or international organization.

Voluntariness of providing data

In any case, the provision of Data by the User is voluntary, however, failure to provide Data by the User, may make it difficult or impossible to use the services of the Website.

User rights

Each User has the following rights in connection with the processing of his Personal Data:

The right to access the Data and to obtain a copy of the Data;
The right to request rectification of the Data;
The right to delete the Data, with the condition for exercising this right being the existence of one of the following conditions:

the Data is no longer necessary for the purposes for which it was collected or otherwise processed;
the Data Subject has withdrawn the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR Regulation, and there is no other legal basis for the processing;
the Data Subject objects under Article 21(1) of the GDPR Regulation to the processing and there are no overriding legitimate grounds for the processing, or the Data Subject objects under Article 21(2) of the GDPR Regulation to the processing;
the Data was processed illegally;
the Data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which the Administrator is subject;
the Data was collected in connection with the offering of information society services referred to in Article 8 (1) of the GDPR Regulation;

The right to lodge a complaint with the data protection supervisory authority,
The right to restrict the processing of Data;
The right to withdraw consent to the processing of Data (where and to the extent that the Data is processed on the basis of consent) – withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal);
The right to Data portability (if and to the extent that the Data is processed on the basis of consent or is necessary for the provision of the service),
The right to object to the processing of the Data.

In matters related to the exercise of the above-mentioned rights, you can contact the Administrator.

Data will not be subject to profiling or automated decision-making, except as described in this Privacy Policy.

§ 3.
COOKIE POLICY

Cookies are small text files that are saved and stored on your computer, tablet or smartphone while you visit various pages on the Internet. A cookie contains nameless data only about how and what you use the Website.

The Website uses cookies only to ensure proper and convenient operation of the Website for Users and for statistical purposes. The Administrator allows third parties (including Google AdWords, Google Analytics) to use cookies for statistical and advertising purposes.

By using our site you accept the rules, expressed in the Cookie Policy. You decide for yourself whether you want cookies to be stored on your computer. You can deactivate or completely disable cookies in the options of your web browser or by selecting the appropriate option in programs like Firewall. You can also delete the cookies saved so far.

Disabling cookies may result in difficulties regarding the use of certain services and functionalities of the Website. If you do not agree to our use of cookies, you should change the settings of your browser as appropriate or stop using the Website.

Cookies are used for the following purposes:

They adjust the content of websites to the User’s preferences and optimize the use of websites; in particular, these files allow you to recognize the device of a User of the Website and appropriately display the website, tailored to his individual needs.
Creation of statistics that help to understand how Users of the Website use the websites, which allows to improve their structure and content.

The following types of cookies are used on the Website:

Cookie	Expiration	Description	Third party access (YES/NO)
x-one_visited	6 months	Files used to verify that the User accepts cookies.	NO
Google Analytics	12 months	Survey of user activity on the Service.	NO

If you do not want to receive cookies, you should use the option of the browser you use to connect to the Website and select the option to automatically reject cookies. These settings usually also allow you to manage cookies otherwise. For more information regarding cookie management, please visit:

Microsoft Explorer: http://support.microsoft.com/kb/278835/pl
Mozilla Firefox: http://support.mozilla.org/pl/kb/usuwanie-ciasteczek
Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95582
Opera: http://www.opera.com/browser/tutorials/security/privacy/
Apple Safari: http://www.apple.com/support/safari/

§ 4.
USING THE GOOGLE ANALYTICS TOOL

The Website uses the Google Analytics 4 tool. The use of this tool is done with the privacy policy, which is available at: https://www.google.com/policies/privacy/. It is possible to block the Google Analytics 4 tool, according to the instructions available at: https://tools.google.com/dlpage/gaoptout/.

§ 5.
EXCLUSIONS

This Privacy Policy does not apply to the websites of entities whose contact information or links may appear on our pages. The Administrator is not responsible for the information provided by or collected through these sites, or for any other actions of these sites.

§ 6.
FINAL PROVISIONS

To the extent not regulated by the provisions of the Privacy Policy, the relevant provisions of generally applicable law shall apply.